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Top Stories 

• Tens of thousands of car owners whose air bags were replaced in the past 3 years may have 
had dangerous counterfeit bags installed, the U.S. Presidential administration warned 
October 10. - Associated Press (See item 10 ) 

• A man arrested at Los Angeles International Airport wearing a bulletproof vest and flame- 
resistant pants refused to cooperate with federal officials working to discover why he was 
headed to Boston with a suitcase full of weapons. - Associated Press (See item 20 ) 

• Pressure mounted for greater federal regulation in response to a meningitis scare caused by 
tainted steroid injections that widened to 1 1 States and 138 people — including 12 who 
died — October 10. - Reuters (See item 37) 

• The U.S. State Department withdrew U.S. security personnel from Libya just weeks before 
suspected Islamist extremists killed the U.S. ambassador and three other Americans there. 
This withdrawal occurred despite warnings from the U.S. Embassy that the Libyan 
government could not protect foreign diplomats, according to an email released October 9. 
- McClatchy Newspapers (See item 43) 
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Energy Sector 



1. October 10, Los Angeles Times - (California) Inglewood Oil Field fracking study 
finds no harm from the method. A study released October 10 says the controversial 
oil extraction method known as hydraulic fracturing, or fracking, would not harm the 
environment if used at the Inglewood Oil Field in the Baldwin Hills area of Los 
Angeles. The year-long study by an environmental consulting firm included several 
issues raised by residents living around the field, such as the potential risks for 
groundwater contamination, air pollution, and increased seismic activity. For months, 
water wells on the 1,200-acre field were monitored. Data from ground and air monitors 
were collected and analyzed, but no effects were recorded before or after the technique 
was used, the study says. 

Source: http://www.latimes.com/news/local/la-me-fracking-baldwin-hills- 
20121010,0,5707434.story 



2. October 7, Associated Press - (California) Nearly 1,000 gallons stolen from Roseville 
gas station. Police in the northern California city of Roseville are investigating the 
theft of nearly 1,000 gallons of gas from a Shell station. The station’s manager said 
October 6 that thieves in a pickup truck somehow disabled the meter to steal 300 
gallons of gas after business hours September 27. He said security cameras caught them 
returning September 28 and taking another 300 gallons of gas, some of it going to a 
ta nk in the truck’s bed. The manager said the thieves came back again during store 
hours and siphoned 300 more gallons, but a cashier recognized the suspicious vehicle 
and recorded its license plate. He estimated the stolen gas was worth $4,500. 

Source: http://www.dailvrepublic.com/usworld/nearlv-1000-gallons-stolen-from- 
roseville-gas-station/ 

For more stories, see items 8, 16, 19, and 33 
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Chemical Industry Sector 

3. October 10, WNBC 4 New York - (New Jersey) Seven injured in chemical plant 
explosion in East Rutherford. Seven people were injured after an explosion at a 
chemical plant in East Rutherford, New Jersey, October 9, police said. The explosion 
happened as workers were mixing chemicals inside the Sun Chemical plant. An East 
Rutherford Fire Department assistant chief said the workers were mixing carbon and 
vegetable oil used in newspaper ink for the New York Times. Sun Chemical is the 
world's largest producer of printing inks and pigments, according to its Web site. A law 
enforcement source said the fire and chemicals spread to other workers after a fire 
extinguisher was used to put out the flames from the mixing vat. As the worker used 
the extinguisher, the contamination was spread from the original two workers to five 
more. Five workers were in fair condition at a hospital, while two others were 
transported to a bum unit at a different hospital. The explosion and subsequent fire was 
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contained inside the plant, the Bergen County police chief said. He said the county 
HAZMAT team responded to decontaminate employees, firefighters and others 
exposed to the chemicals. 

Source: http://www.nbcnewyork.com/news/local/east-rutherford-ni-fire-explosion-sun- 
chemical-plant-173333201.html 

4. October 9, Milwaukee-Wisconsin Journal Sentinel - (Wisconsin; Illinois) Cleanup of 
hazardous chemicals in Slinger completed. Federal emergency response contractors 
removed the last of several thousand gallons of hazardous chemicals October 9 from an 
abandoned metal plating factory in Slinger, Wisconsin, a U.S. Environmental 
Protection Agency (EPA) official said. The work ended the initial hazard removal stage 
of a taxpayer- financed cleanup that began September 12 inside the former Niphos 
Coatings factory. The deteriorated wood-frame building is in a residential 
neighborhood and a few blocks from three schools. The load of removed chemicals 
included extremely hazardous nitric acid, metal plating waste, and other liquids. All of 
the chemicals were to be shipped to Illinois hazardous waste companies for proper 
disposal, said an on-scene coordinator with the EPA's Superfund program. An 
undetermined though smaller quantity of thick sludge from the metal plating process 
remains in the building, she said. The sludge likely will be solidified and removed this 
month. Niphos Coatings closed in March 2010. No chemical wastes had been shipped 
off site since 2008. 

Source: http://www.isonline.com/news/ozwash/cleanup-of-hazardous-chemicals-in- 
slinger-is-completed-ul75rh6-173373861.html 

[ Return to top ] 

Nuclear Reactors, Materials and Waste Sector 

5. October 10, Richmond Times-Dispatch - (Virginia) Dominion shuts down 1 of its 2 
nuclear reactors at North Anna. Dominion Virginia Power shut down one of the two 
nuclear reactors at its North Anna generating facility in Louisa County, Virginia, 45 
miles northwest of Richmond, because of concerns about failing reactor coolant pump 
seals, the Richmond Times-Dispatch reported October 10. A U.S. Nuclear Regulatory 
Commission spokesman said that North Anna's operators shut down Unit 2 October 7 
after determining that a seal was degrading on a reactor coolant pump. The utility 
decided that while the unit was shut down, crews should go ahead and replace the seal 
package on another coolant pump as well. The process will likely take several days. 

The degradation was discovered before it posed a danger to the public, the spokesman 
said. Unit 1 continues to operate at full power. 

Source: http://www2.timesdispatch.com/news/2012/oct/10/dominion-shuts-down-l-its- 
2-nuclear-reactors-north-ar-2272041/ 

6. October 10, Reuters - (International) Greenpeace activists hide overnight at Swedish 
nuclear plants. Six environmental activists evaded police and hid overnight at two 
Swedish nuclear power plants after the sites were invaded on the previous day by 
Greenpeace campaigners demanding the closure of the stations on grounds of poor 
security, Reuters reported October 10. A spokeswoman for Greenpeace Nordic said the 
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six had remained in restricted areas around the Ringhals and Forsmark plants by hiding 
on rooftops. October 9, plant owner Vattenfall said police had detained in all 59 people 
who had climbed over or cut through fences into the plants' grounds. The Greenpeace 
spokeswoman said police resumed the searches again October 10 after one of those 
hiding at Ringhals tweeted her whereabouts. A Vattenfall spokesman said police had 
found and detained all six by mid-day. 

Source: http://www.reuters.com/article/2012/10/10/us-sweden-nuclear-activists- 



idUSBRE8990H620121010 



7. October 9, Beaver County Times - (Pennsylvania) Crack found in nuclear reactor 
head. FirstEnergy Corp. officials said a crack in the reactor head on Beaver Valley 
Nuclear Power Station’s Unit 2 in Shippingport, Pennsylvania, did not release any 
radiation and is not a hazard, the Beaver County Times reported October 9. Crews 
found a crack in Unit 2’s reactor vessel head during a scheduled refueling process 
October 6. The unit has been shut down since September 24 for refueling and 
maintenance. The crack was found on the welding around one of the unit’s 66 openings 
through which nuclear fuel rods are inserted into the reactor. A U.S. Nuclear 
Regulatory Commission spokesman confirmed that the crack did not go all the way 
through the vessel head, and said that most nuclear power plants are in the process of 
replacing the welds with stronger alloys. The Beaver Valley Power Station has already 
replaced these parts in Unit 1 and has plans to replace them in Unit 2 in the next several 
years. 

Source: http://www.timesonline.com/news/local news/crack-found-in-nuclear-reactor- 
head/article e41fe355-b96U-5d4a-a357-79598f58e4f3.html 

8. October 8, The Guardian - (Texas) Halliburton finds lost radioactive rod in 
Texas. The oilfield services company Halliburton found a 7 -inch radioactive rod it lost 
in the Texas desert almost a month before, the London Guardian reported October 8. 
The company lost the rod, which contains americium-241 /beryllium, during a 130-mile 
journey between oil well sites in Pecos and Odessa September 1 1. A spokesman for 
Halliburton said the device was found October 4 on a road about 7 miles from the well 
site in Pecos, where the rod was last used. The Midland County sheriff said an oilfield 
pumper recognized the device from fliers that had been handed out in the area. 
Halliburton workers, police officers, and the National Guard had been involved in 
searching for the rod. The U.S. Nuclear Regulatory Commission said americium- 

241 /beryllium, known as Am-241, is a "category 3" source of radiation and would 
normally have to be held for some hours before causing health problems. 

Source: http://www.guardian.co.uk/business/2012/oct/08/halliburton-radioactive-rod- 
texas 



9. October 8, Beaver County Times - (Pennsylvania) FirstEnergy won't contest finding 
of security breach at Shippingport. According to the Beaver County Times, 
FirstEnergy Corp. is not disputing a security-related violation filed against the Beaver 
Valley Nuclear Power Station in Shippingport, Pennsylvania, by the U.S. Nuclear 
Regulatory Commission (NRC), a FirstEnergy spokeswoman confirmed October 8. 
Since the deficiency was security-related, however, neither the utility company nor the 
NRC said whether more than one violation occurred or what the violation was. A 
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FirstEnergy spokeswoman said the problem was identified by a plant worker during a 
July 13 inspection and that action was taken immediately. She said the issue has been 
corrected. According to the NRC report issued in August, inspectors found at least one 
“greater-than-green” violation, which means the violation was of greater than low- 
security significance. An NRC spokesman said the finding means the plant will be 
subject to increased oversight until inspectors are convinced that any issues have been 
corrected. 

Source: http://www.timesonline.com/news/local news/firstenergy-won-t-contest- 
finding-of-securitv-breach-at-shippingport/article 405d6a43-644a-589d-af7e- 
adfa3 1 5 96c5 c .html 
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Critical Manufacturing Sector 

10. October 10, Associated Press - (National) Counterfeit air bags called 'extreme 
safety risk'. Car owners whose air bags were replaced in the past 3 years may have had 
dangerous counterfeit bags installed, the U.S. Presidential administration warned 
October 10. Only 0.1 percent of the U.S. vehicle fleet is believed to be affected, the 
National Highway Traffic Safety Administration (NHTSA) said in a statement. 
However, industry officials briefed by the government said tens of thousands of car 
owners may be driving vehicles with counterfeit air bags. In government tests of 1 1 
counterfeit bags, 10 did not inflate or failed to inflate properly. In one test, a counterfeit 
bag shot flames and shards of metal shrapnel at a crash dummy instead of inflating, 
according to the NHTSA Administrator. NHTSA is asking car owners to check a 
government Web site for information on how to contact a call center established by 
auto manufacturers to learn if their vehicle model is among those for which counterfeit 
air bags are known to have been made. NHTSA compiled a list of dozens of vehicle 
makes and models for which counterfeit air bags may be available, but the agency 
cautioned that the full scope of the problem was not clear yet and the list is expected to 
"evolve over time." The counterfeit bags were typically made to look like air bags 
made by automakers and usually include a manufacturer's logo. Government 
investigators believe many of the bags come from China, an industry official said. 
Source: http ://w w w. omaha.com/article/20 12101 0/AP 1 3/3 10109990 

11. October 10, Los Angeles Times - (National; International) Toyota recalling millions 
of cars to fix fire hazard. Toyota will recall 2.5 million vehicles sold in the United 
States to fix a faulty power window switch linked to several hundred reports of smoke 
and fires and at least 9 injuries, the Los Angeles Times reported October 10. The move 
by Toyota follows a National Highway Traffic Safety Administration probe into the 
problem and is part of a global recall of nearly 7.5 million vehicles. The U.S. recall 
includes the following models: Yaris, RAV4, Tundra, Canary, Canary Hybrid, Scion 
xD, Scion xA, Sequoia, Highlander, Highlander Hybrid, Corolla, and the Matrix. The 
recalled model years vary, but span from 2007 to 2009. 

Source: http://www.latimes.com/business/monev/la-fi-mo-auto-toyota-recall- 
20121010,0,2490456.story 
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For another story, see item 4 
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Defense Industrial Base Sector 



Nothing to report 
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Banking and Finance Sector 

12. October 9, United Press International - (New York) Fake bills found in New York 
City ATMs. Crudely counterfeited currency was found in automatic teller machines at 
two New York City banks, and bank officials said about $110,000 was missing, United 
Press International reported October 9. Police and bank officials were investigating, on 
the assumption the stacks of fake money, printed on ordinary paper stock and only on 
one side, were placed in two Chase Bank branch machines to replace stolen cash. The 
counterfeit bills were not to fool customers but to imply the machines had a full load of 
cash, The New York Times reported. At least two customers received fake $20 bills in 
transactions with the machines, but alerted bank personnel quickly and resolved the 
situations, a bank official said. 

Source: http://www.upi.com/Top News/US/2012/10/09/Fake-bills-found-in-New- 
York-City-ATMs/UPI-76581349807593/?spt=hs&or=tn 

13. October 9, MarketWatch - (National) U.S. approves stress test rules for 100 
banks. Bank regulators October 9 approved regulations requiring more than 100 large 
financial institutions with more than $10 billion in assets to conduct annual stress tests 
to ensure they have enough capital in the event of a deep recession. The rules expand 
on a similar stress test developed by the Federal Reserve for the biggest bank holding 
companies with $50 billion or more in assets, and the agencies have agreed to 
coordinate efforts on the tests. The Federal Reserve stress test in March gave failing 
marks to Ally Financial Inc., Citigroup Inc., MetLife Inc., and SunTrust Banks Inc. The 
new rules were approved by the board of Federal Deposit Insurance Corp., the 
Comptroller of the Currency, and the Federal Reserve as part of a three-agency joint 
rule effort. The regulation requires stress tests based on three scenarios, a baseline 
scenario, an adverse scenario, and a severely adverse scenario that will be provided to 
banks and the public by November 15 at the latest each year. 

Source: http://articles.marketwatch.com/2012-10-09/economy/34333219 1 stress- 
tests-bank-regulators-smaller-banks 

14. October 9, Bloomberg News - (International) Capital One target as cyber attacks 
resume on U.S. banks. Capital One Financial Corp. said it was the latest target in a 
new round of coordinated cyber attacks aimed at disrupting the Web sites of major U.S. 
banks, Bloomberg News reported October 9. SunTrust Banks Inc. and Regions 
Financial Corp. said they expect to be next. A spokeswoman for Capital One confirmed 
in an email statement that the bank’s online systems were disrupted, but that most 
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online services had been restored. “At this point, we have no reason to believe that 
customer and account information is at risk,” she said. The computer assaults are a 
continuation of a campaign that began last month using commercial servers to overload 
bank Web sites with Internet traffic, temporarily disrupting and slowing online services 
for customers. A group claiming responsibility said that attacks would continue against 
SunTrust October 10, and Regions Financial October 11. 

Source: http://www.businessweek.com/news/2012-10-09/capital-one-target-as-cyber- 
attacks-resume-on-u-dot-s-dot-banks 



15. October 9, Reuters - (National) U.S. sues Wells Fargo in mortgage fraud case. The 
U.S. Government filed a civil mortgage fraud lawsuit October 9 against Wells Fargo & 
Co, the latest legal volley against big banks for their lending during the housing boom. 
The complaint, brought by the U.S. Attorney in Manhattan, seeks damages and civil 
penalties from Wells Fargo for more than 10 years of alleged misconduct related to 
government-insured Federal Housing Administration (FHA) loans. The lawsuit alleges 
the FHA paid hundreds of millions of dollars on insurance claims on thousands of 
defaulted mortgages as a result of false certifications by Wells Fargo. Wells, the largest 
U.S. mortgage lender, denied the allegations, and said in a statement it believes it acted 
in good faith and in compliance with FHA and U.S. Department of Housing and Urban 
Development rules. 

Source: http://articles.chicagotribune.com/2012-10-Q9/news/sns-rt-us-wellsfargo- 
Iawsuitbre8981c8-20121009 1 mortgage-fraud-case-fha-direct-endorsement-lender 
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Transportation Sector 

16. October 10, KXAN 21 Austin - (Texas) SH 21 reopens after deadly tanker 

crash. One person died overnight when a pickup truck got pinned under a gas tanker on 
State Highway 21 in Mustang Ridge, Texas. The accident late October 9 shut down the 
eastbound lanes of SH 21, near the interchange with U.S. Highway 183. The highway 
reopened about 7 hours later October 10. The pickup truck driver died at the scene. The 
tanker driver was not hurt. Emergency workers off-loaded the fuel from the tanker, and 
no fuel spilled. "Dealing with the product that we had — but unleaded fuel and diesel 
fuel and the mixture of the two with fumes — any type of spark could have caused an 
explosion of some kind," said a Chisholm Trail Fire Rescue assistant chief. 

Source: http://www.kxan.com/dpp/news/deadly-gas-tanker-crash-closes-hwv-21 

17. October 10, Associated Press - (Georgia) Atlanta bridge closes after it's damaged by 
fire. Authorities said a major thoroughfare through downtown Atlanta would be closed 
October 10 after a fire damaged the structure and sent chunks of concrete raining down 
to the street below. An Atlanta Fire Rescue spokesman told WSB-TV 2 Atlanta that the 
blaze broke out October 9 in a homeless camp near the Mitchell Street bridge. The fire 
was so hot that it heated up the concrete and caused large pieces to fall. Authorities said 
engineers were planning to assess the damage October 10. 

Source: 
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http://www.newschannel9.com/template/inews wire/wires .regional. ga/3c4b 11 39- 
www.newschannel9.com.shtml 



18. October 10, Associated Press - (Hawaii) Homeland security probes unscreened bags 
in Hawaii. An investigation into why security officers at Honolulu International 
Airport in Hawaii failed to screen some checked bags for explosives said the slip-up 
might not have happened if Transportation Security Administration (TSA) supervisors 
did a better job of overseeing the officers. The probe from DHS's inspector general's 
office, released October 9, said the incident years ago may have been avoided if 
adequate staff and screening equipment was provided. The report recommended that 
the TSA revise job descriptions for checked baggage supervisors and managers to 
clarify responsibilities. It said the TSA should ensure supervisors and managers were 
trained to ensure screening was done as required. Investigators said the TSA does not 
know how many bags were not screened at Lobby 4, which handles mostly 
international passengers traveling to Asia, the Pacific, and Canada, in 2010. The 
security lapse came to light after two Honolulu employees said thousands of bags were 
not checked properly or screened for traces of explosives. In 2011, the TSA fired or 
suspended dozens of employees after its own investigation, taking the single largest 
personnel action for misconduct in the agency's history. The 50-page report dated 
September 27 said the TSA had a fragmented and inconsistent process for developing 
and evaluating changes to baggage screening, and this may have contributed to the 
problem. The TSA in a statement October 9 said it recently reviewed job duties and 
responsibilities to update position descriptions for checked baggage supervisors and 
managers. 

Source: http://www.sbsun.com/living/ci 21739255/homeland-security-probes- 
unscreened-bags-hawaii 

19. October 9, Bel Air Aegis - (Maryland) Overturned fuel tanker closes 1-95 to 
northbound traffic for seven hours. Two of the three lanes for northbound traffic on 
1-95 were re-opened October 9, about 7 hours after an overturned fuel tanker truck 
caused major delays for motorists along the Harford County, Maryland portion of the 
interstate highway. The crash, which involved the tanker truck and a passenger car near 
the south entrance of the Tydings Bridge, forced the closing of 1-95 in both directions, 
Maryland State Police said. Southbound traffic was allowed to resume using the 
roadway about 2 hours after the accident, but all northbound traffic was diverted. The 
overturned truck spilled about 3,500 gallons of diesel fuel into the soil on the Harford 
County side of the bridge, a Maryland Department of the Environment spokesman said. 
The U.S. Coast Guard also responded to the scene, and the "responsible party" in the 
accident will be accountable for any clean-up, the spokesman said. He identified the 
trucking company as Pilot Flying J of Knoxville, Tennessee, operator of truck and 
travel stops and bulk fuel supplier. A spokesman from State police headquarters in 
Pikesville, said the tanker truck spilled part of its load and HAZMAT crews were 
dispatched to the scene and to the river for containment. 

Source: http://www.baltimoresun.com/explore/harford/news/traffic/ph-ag-tydings- 
bridge-crash- 101 0-20121 009,0,2482986. story 
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20. October 9, Associated Press - (California) Feds: Man arrested at LA airport not 
cooperating. A man arrested at Los Angeles International Airport in Los Angeles 
wearing a bulletproof vest and flame -resistant pants would not cooperate with federal 
officials working to discover why he was headed to Boston with a suitcase full of 
weapons, the Associated Press reported October 9. The man was taken into custody 
recently during a stopover on a trip from Japan when U.S. Customs and Border 
Protection officers reported he was wearing the protective gear under his trench coat, 
triggering a Homeland Security investigation. A search of his checked luggage 
uncovered numerous suspicious items, including a smoke grenade, knives, body bags, a 
hatchet, a collapsible baton, a biohazard suit, a gas mask, billy clubs, handcuffs, leg 
irons, and a device to repel dogs, authorities said. The suspect was charged with one 
count of transporting hazardous materials, an offense that carries a maximum penalty of 
5 years in prison. He made a brief court appearance October 9, but his arraignment was 
delayed until October 12 and he was ordered held until then. The suspect is a U.S. 
citizen whose permanent residence is in Boston, though he recently started living and 
working in Japan, officials said. 

Source: http://www.star-telegram.com/2012/10/09/4323257/man-arrested-after-smoke- 
grenade.html 

21. October 9, Washington Post - (Maryland) Downed wires delay Amtrak, MARC 
trains. Many Amtrak trains in the region were canceled or delayed October 9 and some 
Maryland commuter rail stations north of Baltimore were closed after overhead 
electrical wires came down south of Aberdeen. The Aberdeen and Perryville stations 
serving Maryland Area Regional Commuter (MARC) trains on the Penn Line remained 
closed throughout the morning, forcing commuters to catch trains at Edgewood. A 
spokesman for the Maryland Transit Administration, said about 400 MARC passengers 
were affected by the station closings October 9. Amtrak investigated why the wires 
came down on the tracks, an Amtrak spokeswoman said. Amtrak trains were delayed 
30 to 90 minutes throughout the morning, she said. Amtrak resumed full service 
between Washington D.C. and Wilmington, Delaware late in the day. Amtrak might 
not know the cause of the wire problem until later the week of October 8. 

Source: http://www.washingtonpost.com/local/trafficandcommuting/downed-wires- 
delay-amtr ak- marc-trains/201 2/10/09/e7033dl4- 1228-1 Ie2-al6b- 
2c 1 1 0031514a story .html 

22. October 8, Associated Press - (National) Alaska Airlines operations returning to 
normal after computer outage cancels nearly 80 flights. Alaska Airlines said flights 
were running close to normal October 8 after a fiber-optic outage shut down its 
ticketing system for more than 4 hours, causing the airline and its regional carrier to 
cancel 78 flights, affecting nearly 7,000 customers. More than 130 other flights 
departed during the disruption, but some were delayed for as long as 4 hours, the airline 
said. The problems started when computers the airline uses to check in passengers went 
down early October 8, forcing employees to board travelers manually — in some 
instances sticking handwritten flight numbers to computer monitors. The problems 
were caused by two severed fiber-optic lines in Sprint’s network. Most affected were 
Alaska’s hub cities of Seattle, Portland, Oregon, Los Angeles, Anchorage, Alaska, and 
the San Francisco area. The problem was caused by a combination of two cut cables in 
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Sprint’s fiber-optic network. One occurred at a construction site along railroad tracks 
between Chicago and Milwaukee and the other was somewhere between Portland and 
Seattle, said a Sprint spokeswoman. The second cut involved an aerial cable that runs 
along power lines. 

Source: http://www.washingtonpost.com/lifestvle/travel/alaska-airlines-operations- 
returning-to-normal-after-computer-outage-cancels-nearlv-80- 
flights/2012/10/08/3b055ae0-l lb2-l Ie2-9a39-lf5a7f6fe945 story.html 

For more stories, see items 41 and 55 
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Postal and Shipping Sector 

23. October 9, Riverside Press-Enterprise - (California) Yucaipa: Several chemical 
bombs found in city. Sheriffs investigators are warning residents of Yucaipa, 
California, to avoid touching, picking up, or kicking bottles containing unknown fluids 
after several chemical bombs were found throughout the city, the Riverside Press- 
Enterprise reported October 9. The bombs have been left in mailboxes and in front 
yards, the San Bernardino County Sheriffs Department said in a news release. The 
department did not say where specifically the bombs were found. The explosives 
contain chemical cleaners inside plastic beverage bottles and a piece of foil inserted 
into the bottle that causes the bombs to explode. Under normal conditions, the bombs 
will go off on their own, but occasionally they do not explode until they are disturbed, 
investigators said. So far, no one has been hurt. 

Source: http://www.pe.com/local-news/san-bemardino-countv/san-bernardino-countv- 
headlines-index/20121009-vucaipa-several-chemical-bombs-found-in-city.ece 

[ Return to top ] 

Agriculture and Food Sector 

24. October 10, U.S. Food and Drug Administration - (Maryland; Virginia; District of 
Columbia) Nina International recalls Ground Hot Pepper because of possible 
health risk. October 10, Nina International of Hyattsville, Maryland, voluntarily 
recalled its brand of Ground Hot Pepper, 5-ounce, because it is potentially 
contaminated with Salmonella. The product was distributed in Maryland, Washington, 
D.C., and Virginia and reached consumers through African and ethnic retail food 
stores. The product is in a 5-ounce, clear plastic container, and inscribed with “Nina 
International, The Best Brand” and ’’Ground Hot Pepper, Chillies, All Natural.” It has a 
yellow seal with a red “Nina” inscription with the barcode 745851004004. The recall 
was the result of a routine test which revealed that the finished products contained the 
bacteria. 

Source: http://www.fda.gov/Safety/Recalls/ucm323227.htm 

25. October 10, Food Safety News - (Washington) Health authorities close Vancouver, 
WA restaurant for Salmonella oubtreak. Clark County Public Health announced 
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October 10 that it was investigating at least 16 Salmonella cases among patrons of On 
the Border, a Mexican restaurant in Vancouver, Washington. “We closed the restaurant 
this morning as a further precaution to reduce the risk of Salmonella spreading to 
others,” said the Clark County health officer. ”Our staff is interviewing employees and 
patrons to learn more about the possible source of the outbreak, such as a contaminated 
food source. We’re also working with restaurant staff to make sure standard control 
measures are in place," he added. To date, health authorities have confirmed 1 1 cases 
and identified 5 additional ’’probable cases” associated with this outbreak. 

Source: http://www.foodsafetvnews.com/2012/10/health-authorities-close-vancouver- 
wa-restaurant-for-salmonella-oubtreak/ 



26. October 9, General Mills - (National) General Mills voluntarily recalls limited 
number of Cascadian Farm snack bars containing peanuts. General Mills 
announced a voluntary recall October 9 of a limited number of Cascadian Farm 
Granola Bars containing peanuts. The peanut pieces in the products may have been 
sourced from Sunland, Inc., a peanut supplier that recently expanded its recall of peanut 
ingredients. The recall includes 6-count boxes of Cascadian Farm Peanut Butter Chip 
Chewy Granola Bars with better-if-used-by dates of November 1 and November 2, 
2012. The granola bars were produced in February and may no longer be on store 
shelves. Consumers were urged to dispose of any Cascadian Farm Granola Bar 
products containing peanuts that are past the better-if-used-by date printed on the box. 
Source: 

http://www.generalmills.com/Media/NewsReleases/Library/2012/Qctober/CascadianFa 

rm.aspx 

27. October 9, U.S. Food and Drug Administration - (National) Belfonte Ice Cream & 
Dairy Foods Company announces voluntary recall of ice cream due to possible 
health risk. Belfonte Ice Cream and Dairy Foods Company of Kansas City, Missouri, 
October 9, initiated a recall of a peanut butter containing ice cream because it has the 
potential to be contaminated with Salmonella, due to the use of recalled Sunland Inc. 
products. Recalled products include the Home Run Sundae (UPC 83057-91023) and 
Mama's Choice Reverse Peanut Butter Pie (UPC 83057-17033) flavors. The ice cream 
was sold between April 2010 and October 2012 in retail and convenience stores in 
Missouri, Kansas, Oklahoma, and Arkansas. 

Source: http://www.fda.gov/Safety/Recalls/ucm323149.htm 

28. October 9, U.S. Food and Drug Administration - (National) Clemmy's is voluntarily 
recalling Peanut Butter Chocolate Chip ice cream due to possible health 

risks. Clemmy’s Ice Cream of Rancho Mirage, California, voluntarily recalled its 
Peanut Butter Chocolate Chip 16-ounce containers of ice cream October 9. The ice 
cream contains peanut butter associated with the Sunland, Inc. recall and may be 
contaminated with Salmonella. The product was distributed to grocery stores 
nationwide beginning March 2011. The recalled product is in a standard pint container 
with with best by dates of February 2013 through August 2014. 

Source: http://www.fda.gov/Safety/Recalls/ucm323146.htm 
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29. October 9, U.S. Food and Drug Administration - (National) Smith Dairy announces 
voluntary recall on Smith and Ruggles brand Peanut Butter Crunch Ice Cream 
and Acme brand Peanut Butter Twist Ice Cream. Smith Dairy Products Company, 
October 9, announced a voluntary recall on all lot codes of Smith's Peanut Butter 
Crunch ice cream, Acme Peanut Butter Twist ice cream, and Ruggles Peanut Butter 
Crunch and Peanut Butter Crunch Brownie ice cream. The recall notification was 
initiated by Pecan Deluxe, the company that manufactures the peanut butter candy 
pieces in the products. The products were distributed in Ohio, Indiana, West Virginia, 
and Michigan. 

Source: http://www.fda.gov/Safety/Recalls/ucm323 13 1 .htm 

30. October 9, U.S. Food and Drug Administration - (National) Bliss Unlimited, LLC, 
voluntarily recalls Luna & Larry's Coconut Bliss Chocolate Peanut Butter Non- 
Dairy Frozen Dessert, code dates Nov 11 2012 — Oct 24 2013, due to possible 
health risk. Bliss Unlimited, LLC, of Eugene, Oregon, recalled Luna & Larry’s 
Coconut Bliss Chocolate Peanut Butter Non-Dairy Frozen Dessert October 9. Recalled 
expiration dates include November 11, 2012 through October 24, 2013 only. Peanut 
butter used in these products was supplied by Sunland, Inc. and may be contaminated 
with Salmonella. The product was distributed to retail stores nationwide between 
November 2010 and December 2011. It is packaged in 1-pint paperboard containers 
with UPC code 8 96767 00121 9, and stamped with 41-61. 

Source: http://www.fda.gov/Safety/Recalls/ucm323158.htm 

31. October 9, U.S. Food and Drug Administration - (National) Rich Products 
Corporation announced nationwide voluntary recall of Jon Donaire Peanut Butter 
Cup Ice Cream Cake and TCBY Peanut Buttery Fudge Deep Dish Frozen Yogurt 
Pie. In response to the expanded Sunland, Inc. recall, Rich Products Corporation 
October 9, recalled its Jon Donaire Peanut Butter Cup Ice Cream Cake and TCBY 
Peanut Buttery Fudge Deep Dish Frozen Yogurt Pie. Certain lots of the products and 
have the potential to be contaminated with Salmonella. The UPC code for the Jon 
Donaire Peanut Butter Cup Ice Cream Cake is 049800626836. The cake was sold by 
the case primarily to in-store bakeries nationwide; a small amount of product was sold 
to food service distributors nationwide. Each individual unit is boxed with a best by 
date of October 5, 2010 through January 19, 2013. The TCBY Peanut Buttery Fudge 
Deep Dish Frozen Yogurt Pie does not have a UPC code and was sold by the case 
exclusively to TCBY stores. The pie was not packaged for retail distribution. Each 
individual unit is labeled with a best by date of November 14, 2010 through March 1, 
2013. 

Source: http://www.fda.gov/Safetv/Recalls/ucm323200.htm 

32. October 8, Kelloggs - (National) Voluntary recall of select packages of Frosted 
Mini- Wheats Bite Size Original and Mini- Wheats Unfrosted Bite Size. Kelloggs 
initiated a voluntary recall October 8 due to the possible presence of fragments of 
flexible metal mesh from a faulty manufacturing part. Recalled products include only 
Frosted Mini-Wheats Bite Size Original and Mini-Wheats Unfrosted Bite Size with the 
letters KB, AP, or FK before or after the best-if-used-before date. 

Source: 
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http://communitv.kelloggs.com/kelloggs/topics/voluntary recall of select packages o 
f frosted mini wheats bite size original and mini wheats unfrosted bite size- 
6861i#topic 4542700 

For more stories, see items 56 and 60 
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Water Sector 



33. October 10, Baton Rouge Advocate - (Louisiana) More land falls into sinkhole. A 
shallow well recently drilled into the aquifer underneath the Bayou Come area of 
Louisiana hit natural gas, Shaw Environmental officials said October 9. The well was 
one of three that contractors for Louisiana Department of Natural Resources (DNR) 
drilled to find and vent natural gas believed trapped in the Mississippi River Alluvial 
Aquifer. Also, an earlier boring made by Texas Brine Co. LCC of Houston, Texas on 
its leased property also hit gas, Shaw officials said. However gas was not found in 
another DNR relief well drilled farther west on property west of Bayou Corne. Along 
with sampling showing some of the most remote bubble sites are swamp gas from 
decomposing organic matter, the well findings support earlier indications that gas is in 
the aquifer, running under the section of northern Assumption Parish. However the 
findings also suggest the gas has not spread to populated areas. Parish officials have 
said they are concerned the gas could build pressure in the aquifer, escape, and lead to 
an explosive risk, though testing has not found that so far. Shaw officials working with 
the DNR on the sinkhole told about 100 residents gathered for a community meeting 
that the well north of La. 70 and another drilled on the same site would be linked to a 
flare to begin removing the gas gradually. The community has been evacuated since the 
sinkhole was found August 3. DNR scientists have suspected that an abandoned Texas 
Brine salt cavern failed and caused the sinkhole. 

Source: http://theadvocate.com/news/41 1 1969- 123/another-chunk-of-land-falls 

34. October 9, KNOE 8 Monroe - (Louisiana) Boil advisory for Jonesville. There was a 
major leak in a 14-inch water line in the town of Jonesville, Louisiana, KNOE 8 
Monroe reported October 9. The water supply was cut off in the town, which was under 
a boil advisory with the water flowing again that day. All water to be used for drinking, 
brushing teeth, or in food preparation must be boiled for 3 minutes prior to use. This 
advisory would remain in effect until lifted by local authorities. 

Source: http://www.knoe.eom/story/19773785/b 

35. October 9, Rochester Democrat and Chronicle - (New York) Thieves steal Monroe 
County Water Authority's copper. Scrap metal thieves made off with nearly $9,000 
worth of copper in three incidents at the construction site of the Monroe County Water 
Authority’s new treatment plant on Basket Road in Webster, New York, the Rochester 
Democrat and Chronicle reported October 9. Each theft happened over the weekend of 
October 6 when workers were not there. In the first instance, the suspects stole 18 20- 
foot links of copper, worth $2,800, the weekend of July 7. The weekend of August 18, 
another four 20-foot links, worth $2,000, were stolen from the same area in the back of 
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the building under construction. The third instance was the weekend of September 8, 
when thieves stole $4,000 worth of copper that had already been installed in the 
building. Webster police said they have no leads on any of the three incidents. The 
fence around the site is locked with padlocks that require several peoples’ keys to open, 
and there were no signs of forced entry, police said. More security measures have 
recently been implemented. 

Source: 

http ://w w w . democratandchronicle . com/article/20 121 009/NEW SO 1/3 1 0090046/County- 
s-copper-pilfered?odvssev=tablmostpopularltextlSPORTS 

36. October 9, Gant Daily - (Pennsylvania) DEP issues boil water advisory for village in 
Elk County. The Pennsylvania Department of Environmental Protection (DEP) issued 
a boil water advisory to residents of Daguscahonda Village in Ridgway Township, Elk 
County, the Gant Daily reported October 9. The results from a recent sample DEP 
collected from Daguscahonda’ s drinking water source showed that E. coli (fecal) 
bacteria was present in the water at a level well above Pennsylvania Safe Drinking 
Water Act standards. The agency strongly recommended that residents not consume 
untreated Daguscahonda water. Information DEP obtained indicated the water supplied 
to homes in Daguscahonda originates from unprotected springs and stored in an open- 
air reservoir prior to consumption. Untreated water stored in open-air reservoirs poses 
significant health risks because the water is exposed to a wide range of pathogenic 
organisms that are pervasive in the environment and frequently contaminate water. 
Source: http://gantdaily.com/2012/10/09/dep-issues-boil-water-advisory-for-village-in- 
elk-county/ 

For another story, see item 1 
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Public Health and Healthcare Sector 

37. October 10, Reuters - (National) Calls for oversight grow as meningitis scare 

widens. Pressure mounted for greater regulation in response to a meningitis scare that 
widened to 1 1 States on October 10 with the first case confirmed in Idaho, Reuters 
reported. The Idaho case was the first discovered in the western United States. To date, 
138 people have contracted meningitis and 12 have died. Approximately 5 percent of 
patients treated with the suspect medication have contracted meningitis, said the chief 
medical officer for the Tennessee Department of Health. The rate of infection overall is 
not known. The recalled steroid vials were shipped to 76 facilities in 23 States, 
according to the CDC. Tennessee has been the hardest hit, with six reported deaths and 
44 cases of meningitis, followed by Michigan with three deaths and 28 cases, Virginia 
with one death and 27 cases, and Maryland with one death and nine cases. The other 
States with cases are Indiana, Florida, Minnesota, North Carolina, Ohio, New Jersey, 
and Idaho. 

Source: http://www.reuters.com/article/2012/10/10/us-usa-health-meningitis- 
idUSBRE8970TQ20121010 
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38. October 9, Associated Press - (Puerto Rico) Puerto Rico declares dengue 

epidemic. Puerto Rico's health department announced a dengue epidemic October 8. 
The health secretary said at least six people have died, including two children younger 
than 10. A total of 4,816 cases were reported, including 21 cases of the potentially fatal 
hemorrhagic dengue. The U.S. Centers for Disease Control and Prevention said 342 
new cases were reported in 1 week in September, twice the number of cases during the 
same period in 2011. Dengue cases usually flare up from August to January. 

Source: http://www.usatodav.com/storv/news/nation/2012/10/09/puerto-rico-dengue- 
epidemic/1622783/?utm source=feedburner&utm medium=feed&utm campaign=Fee 
d%3A+UsatodavcomNation-TopStories+(News+-+Nation-i — i-Top+Stories) 
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Government Facilities Sector 



39. October 10, Associated Press - (Florida) 1 dead, others trapped in Miami parking 
garage collapse. A section of a parking garage under construction at a community 
college in Miami collapsed October 10, killing one worker and trapping at least two 
others in the rubble, officials said. Several other workers were hurt. The two trapped 
workers used cellphones to talk to rescue teams, a Miami-Dade Fire-Rescue 
spokeswoman said. Dogs, firefighters, and others in hard hats walked over piles of 
concrete, plywood, and metal rubble to look for other possible victims. The large 
section of the roof of the nearly completed 5 -story garage fell late in the morning. No 
students were in the area at the time, authorities said. Four workers were taken to the 
hospital, including one in serious condition, the fire rescue spokeswoman said. Three 
others were treated at the scene. The construction of the 1,855-space garage appeared to 
be nearly complete. Ground was broken on the project in February, and it was to be 
completed in December, according to the Web site of the contractor, Ajax Building 
Corp. The first floor was to have classroom and office space. The structure is nestled 
near other buildings at the college, which serves about 8,000 students and is one of 
several campuses in the Miami-Dade College system. 

Source: http://www.usatodav.com/storv/news/nation/2012/10/10/workers-trapped- 
mi ami-parking-garage-collapse/1 624721/ 

40. October 10, WISC 3 Madison; Associated Press - (Wisconsin) Beloit school will 
reopen Thursday. Robinson Elementary School in Beloit, Wisconsin, was evacuated 
after a gymnasium wall began cracking during construction, October 9. Corporate 
Contractors Inc. was digging to place footing for the addition when the foundation 
under the gymnasium began to collapse, causing the north gym wall to crack. The fire 
department responded and the building was evacuated. Structural engineers said the 
gym structure was sound after crews worked overnight to reinforce the building. 

Classes were canceled October 10, but were scheduled to resume October 11. The gym 
area will not be used until the area is rebuilt. The district was looking into the possible 
use of portable classrooms during construction. About 400 students attend the K-3 
school. 

Source: http://www.channel3000.com/news/Beloit-school-will-reopen-Thursday/- 
/1 648/ 1 6920434/ -/ 1 kx7 1 v/ -/index.html 
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41. October 10, Terrebonne Parish Houma Today - (Louisiana) Phone threat scuttles 
schools, courts. Police arrested a Thibodaux, Louisiana man October 9 who they allege 
made a vague phone threat through 911 that forced officials to close Thibodaux courts 
in the morning and some schools all day. He was charged with terrorizing and 
communicating false alarm, Thibodaux police said. He was scheduled to appear in 
court October 9 to address his child-support payments. Two threatening calls phoned 
into 911 were patched to Thibodaux police where the caller made threats against the 
police department, and buildings and schools in Thibodaux without naming specific 
places, a police detective said. Police went to all of the Thibodaux schools, and then 
relayed the information to district and city courts, which evacuated, as well as 
Lafourche Parish schools, he said. The schools in the two towns serving about 18,000 
students initially were placed on lockdown. But about 2 hours after the initial call, they 
all were evacuated as were the three Catholic schools in Thibodaux. A school 
spokesman said schools did not send out notices immediately because principals and 
staff were implementing lockdowns. Searches with police dogs at the schools and 
courthouse turned up nothing. Police also blocked off a 1 -block perimeter around the 
courthouse. District and city courts reopened about 5 hours after the initial threat. 
Source: 

http://www.houmatoday.com/article/20 121 009/HURBLQG/l 2 1 009665/12 1 1/newsO 1 ? 
Title=Threat-puts-Lafourche-schools-on-lockdown 

42. October 9, Ohio State University Lantern - (Ohio) Ohio State's Newark campus 
reopens after Tuesday morning bomb threat. Ohio State University's (OSU) 

Newark, Ohio campus reopened late the afternoon of October 9 after a morning bomb 
threat shut it down. An alert on the university’s Web site asked all students, faculty, 
and staff to evacuate the campus. Officials at the Newark campus released a statement 
saying the campus would be closed as the Newark police and fire departments were 
investigating the bomb threat. Some students at OSU's Columbus campus said they did 
not receive an email notifying them of the threat. One student said the U.S. President's 
October 9 visit to the Columbus campus made the matter a little more concerning. 
Another student said officials did not evacuate the residence halls, but only the “main 
buildings” on campus. 

Source: http://www.thelantern.com/campus/ohio-state-s-newark-campus-reopens-after- 
tuesday-morning-bomb-threat- 1 .2923069#.UHW g8a6 E3M 

43. October 9, McClatchy Newspapers - (International) Security units pulled from 
embassy in Libya despite warnings. The U.S. State Department withdrew U.S. 
security personnel from Libya just weeks before suspected Islamist extremists killed 
the U.S. ambassador and three other Americans there despite warnings from the U.S. 
Embassy that the Libyan government could not protect foreign diplomats, according to 
an email released October 9. The State Department rejected requests to extend the tours 
of U.S. diplomatic and military security personnel in order to "normalize" embassy 
operations according to "an artificial timetable," the embassy's former security chief, 
wrote in an October 1 email. The email and a list the former security chief compiled 
while in Libya of 230 security incidents between June 2011 and July 2012 were 
released by the House Committee on Oversight and Government Reform on the eve of 
a hearing at which the chief, who is still a State Department security officer, was 
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scheduled to testify. A lieutenant colonel who commanded a security detail at the 
embassy in Tripoli was also scheduled to appear. The security chiefs list, which he said 
resulted in a 30 percent increase in pay this summer for embassy staff because of the 
danger of the assignment, recounted a litany of near-daily bombings, shootings, 
robberies, and other violence. 

Source: http://www.star-telegram.com/2012/10/09/4323812/security-units-pulled-from- 
embassy.html 

For another story, see item 44 
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Emergency Services Sector 

44. October 10, Associated Press - (Texas) Texan charged with impersonating fire 
marshal. A Texas Panhandle man was charged with pretending to be a fire marshal and 
wrongly ordering a business to close, the Associated Press reported October 10. The 
Amarillo Globe-News reported the man was arrested August 28 and charged with 
impersonating a public servant. He was also charged with tampering with a government 
record. He was freed October 9 on $8,500 bond. In August, he allegedly faked being a 
fire marshal and presented a bogus certificate saying a business structure was unsafe. 
Source: http://www.star-telegram.com/2Q12/10/10/4324853/texan-charged-with- 
impersonating.html 

45. October 9, Los Angeles Times - (California) Ironwood prison riot numbers 
increase. October 9, California prison officials said a riot the weekend of October 6 at 
a Blythe prison was much larger than previously reported, involving more than 460 
inmates and sending 7 to the hospital. The disturbance at Ironwood State Prison began 
in an exercise yard and spread to day rooms in two housing units of the medium- 
security prison. An official initially said the fight broke out between some 100 black 
and Latino inmates. The California Department of Corrections and Rehabilitation said 
guards were brought in from the adjacent Chuckawala Valley State Prison. Guards 
responded with batons, direct impact rounds, and pepper spray. One warning shot was 
fired to quell the disturbance. Three inmates remained hospitalized October 9, 
including one with stab wounds. The entire prison was on "restricted movement" 
October 9. 

Source: http://latimesblogs.latimes.com/california-politics/2012/10/corrections-delavs- 
report-of-prison-riot.html 

46. October 9, Associated Press - (Utah) CDC: Old potato cause of Utah prison-brew 
botulism. The Centers for Disease Control and Prevention (CDC) said a weeks-old 
baked potato was the source of a botulism outbreak at a Utah prison where inmates 
consumed cell-brewed alcohol, the Associated Press reported October 9. The outbreak 
sickened eight maximum- security inmates at the State prison in Salt Lake County in 
October 2011. The CDC announced in a report the week of October 1 that the inmates 
made several batches of cell brew made with fruit, water, and sugar, but only one 
contained a potato believed to have made inmates sick. 
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Source: http://www.10tv.com/content/stories/apexchange/2012/10/09/ut— homemade- 
prison-brew-botulism.html 

For another story, see item 41 
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Information Technology Sector 

47. October 10, The H - (International) Mozilla closes numerous critical holes in Firefox 
16. Following the recent Firefox 16 release, Mozilla detailed all of the security fixes in 
the new version of its open source Web browser as well as in the Thunderbird news and 
email client. Version 2.13 of the SeaMonkey "all-in-one internet application suite" also 
received fixes. In addition to adding new features, version 16.0 of Firefox closes 14 
security holes, 11 of which are rated as "Critical" by the project. These critical 
vulnerabilities include several memory handling and corruption issues, buffer 
overflows, and the possibility of arbitrary code execution through bypassing security 
checks for the cross-origin properties. Another vulnerability could lead to JavaScript 
crashing the browser when using an invalid cast with the instanceof operator. 

According to Mozilla, many of these vulnerabilities could be exploited remotely by an 
attacker to, for example, execute malicious code on a victim's system. 

Source: http://www.h-online.com/security/news/item/Mozilla-closes-numerous-critical- 
holes-in-Firefox-16-1726884.html 



48. October 10, The H - (International) BIND DNS server updates close critical 

hole. The Internet Systems Consortium (ISC) is warning users of a critical vulnerability 
in the free BIND DNS server that can be exploited by an attacker to cause a denial-of- 
service (DoS) condition. According to the ISC, the security issue (CVE-20 12-5 166) is 
caused by a problem when processing a specially crafted combination of resource 
records (RDATA). When loaded, this data can cause a name server to lock up. The ISC 
says that, when this happens, normal functionality can only be restored by terminating 
and restarting the named daemon. Affected versions include 9.2.x to 9.6.x, 9.4-ESV to 
9.4-ESV-R5-P1, 9.6-ESV to 9.6-ESV-R7-P3, 9.7.0 to 9.7.6-P3, 9.8.0 to 9.8.3-P3, and 
9.9.0 to 9.9.1-P3. The ISC notes that while versions 9.2, 9.3, 9.4, and 9.5 of BIND are 
vulnerable, these branches are considered to be "end of life" (EOL) and are no longer 
updated. Upgrading to 9.7.7, 9.7.6-P4, 9.6-ESV-R8, 9.6-ESV-R7-P4, 9.8.4, 9.8.3-P4, 
9.9.2, or 9.9.1-P4 corrects the problem. Alternatively, as a workaround, users can set 
the "minimal-responses" option to "yes" in order to prevent the lockup. 

Source: http://www.h-online.com/security/news/item/BIND-DNS-server-updates-close- 
critical-hole-1727232.html 



49. October 10, The H - (International) Pwnium 2: Full Chrome exploit earns hacker 
$60,000. Google's Chrome Web browser fell at the company's Pwnium 2 security 
competition, which took place October 10 at the Hack In The Box conference. SC 
Magazine reported that the hacker who goes by the pseudonym "Pinkie Pie" was 
successfully able to "fully exploit" Chrome, escaping the sandbox using only bugs 
within Chrome. The hack was done on a fully patched 64-bit Windows 7 system 
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running the latest stable branch of Chrome. 

Source: http://www.h-online.com/securitv/news/item/Pwnium-2-Full-Chrorne-exploit- 
eams-hacker-60-000-1727282.html 



50. October 9, Threatpost - (International) Microsoft report exposes malware families 
attacking supply chain. Less than a month after the Nitol botnet takedown, Microsoft 
released data casting more scrutiny on supply chain security. In its latest Security 
Intelligence Report (SIR), Microsoft connected the most prevalent malware families 
involved in supply chain compromises, including malicious add-ons pre-installed on 
PCs by manufacturers, pirated software on peer-to-peer networks, and music and movie 
downloads. Microsoft began its Nitol investigation more than a year ago after it found 
Nitol-related malware on PCs built in China running counterfeit versions of Windows. 
Microsoft took down more than 70,000 sub-domains hosting the botnet, which was 
backed by more than 500 different malware strains. In the SIR, Microsoft reports 
hackers are hitting supply chains by infecting networks with malware bearing file 
names matching popular downloads and by the presence of what Microsoft calls 
indicator families on machines compromised by file-sharing or an insecure supply 
chain. 

Source: http://threatpost.com/en us/blogs/microsoft-report-exposes-malware-families- 
attacking-supply-chain- 1 009 1 2 

51. October 9, Threatpost - (International) Microsoft patches critical word flaw; 
certificate key length changes are official. Microsoft issued seven security updates, 
including a fix for a critical remotely exploitable Word vulnerability. In all, Microsoft 
repaired 20 vulnerabilities, and issued an advisory regarding poorly generated digital 
certificates an automated mechanism that will check for certificate key lengths, 
revoking any shorter than 1024 bits. The patch for the Word flaw fixes a memory- 
parsing vulnerability; attackers using a specially crafted RTF file could remotely gain 
the system privileges if users preview or open the infected RTF file in Outlook's 
preview pane when Word is the default email reader. Microsoft Word 2003, 2007, and 
2010 are vulnerable, as are Microsoft Word Viewer, Microsoft Office Compatibility 
Pack, Microsoft Word Automation Services on Microsoft SharePoint Server 2010, and 
Microsoft Office Web Apps. 

Source: http://threatpost.com/en us/blogs/microsoft-patches-critical- word-flaw - 
certificate-key-length-changes-are-official- 1 009 1 2 

52. October 9, Ars Technica - (International) Confirmed: Apple-owned fingerprint 
software exposes Windows passwords. Security consultants independently confirmed 
a serious security weakness that makes it trivial for hackers with physical control of 
many computers sold by Dell, Acer, and at least 14 other manufacturers to quickly 
recover Windows account passwords. The vulnerability is contained in multiple 
versions of fingerprint-reading software known as UPEK Protector Suite. In July, 

Apple paid $356 million to buy Authentec, the Melbourne, Florida-based company that 
acquired the technology from privately held UPEK in 2010. The weakness was 
revealed no later than September, but Apple has yet to acknowledge it or warn end 
users how to work around it. 
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Source: http://arstechnica.com/security/2012/10/confiiTned-fingerprint-reader-owned- 
by-apple-exposes-windows-passwords/ 

53. October 9, Ars Technica - (International) Skype users targeted by malicious worm 
that locks them out of their PCs. Researchers detected a malware campaign that 
attempts to infect Skype users by sending them booby-trapped links from contacts in 
their address book. The social-engineering ploy attempts to install a variant of the 
Dorkbot worm that previously menaced Twitter and Facebook users. Once installed, 
Dorkbot uses its host computer to engage in click fraud and installs software that locks 
the user out of the machine and displays screens saying their data will be deleted unless 
a $200 "fine" is paid within 48 hours. According to a report from Sophos, the malware 
campaign is taking advantage of the Skype API to spam out messages such as "lol is 
this your new profile pic?" along with a malicious URL. 

Source: http://arstechnica.corn/securitv/2012/10/skvpe-users-targeted-bv-malicious- 
worm-that-locks-them-out-of-their-pcs/ 

54. October 9, Ars Technica - (International) HTTPS Everywhere plugin from EFF 
protects 1,500 more sites. Members of the Electronic Frontier Foundation (EFF) 
updated their HTTPS Everywhere browser plugin to offer automatic Web encryption to 
an additional 1,500 sites, twice as many as previously offered. EFF introduced HTTPS 
Everywhere in 2009 in collaboration with members of the Tor anonymity project with 
the goal of encrypting the entire Web. When the browser extension is installed, users 
are automatically directed to secure sockets layer (SSL) versions of many Web sites 
even when the "HTTPS" tag is not in the URL. Google, Wikipedia, Twitter, and 
thousands of other sites are included, with more added regularly. A previous update to 
HTTPS Everywhere introduced an optional feature called the Decentralized SSL 
Observatory. It detects and warns of possible man-in-the-middle attacks on Web sites a 
user visits by sending a copy of the site's SSL certificate to the EFF's SSL Observatory. 
When EFF detects anomalies, it sends a warning to affected end users. 

Source: http://arstechnica.com/securitv/2012/10/https-everywhere-plugin-from-eff- 
protects- 1 500-more-sites/ 

For more stories, see items 14 and 22 
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To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Commercial Facilities Sector 



55. October 10, Los Angeles Times - (California) Cause of Echo Park commercial blaze 
under investigation. It took firefighters nearly 2 hours to put out a fire in the Los 
Angeles neighborhood of Echo Park that started October 9 and engulfed a commercial 
building. The fire reportedly started in vegetation outside the building and witnesses 
told authorities it spread into the structure through windows. The cause of the fire was 
under investigation and the cost of damage was being tabulated October 10. A Los 
Angeles Fire Department spokesman reported that 125 firefighters tackled the fire. At 
one point, crews had to shift from an aggressive attack to a defensive posture as flames 
swept across the building’s attic and moved into the second floor, “The building ... will 
be a total loss,” the spokesman said. The structure was the site of a business-cleaning 
company and printing business, among others. Traffic on the southbound 101 Freeway 
was severely backed up during the blaze because the building was alongside the 
freeway and lanes were closed, halting traffic as drivers squeezed into the remaining 
lanes and drove slowly by the fire. 

Source: http://latimesblogs.latimes.com/lanow/2012/10/firefighters-extinguish-echo- 
park-commercial-fire-in-two-hours.html 

56. October 10, KP1X 5 San Francisco - (California) Firefighter hurt battling Union 
City 4-alarm strip-mall fire. The roof of a strip mall collapsed prior to the 
containment of a four- alarm fire October 10 in Union City, California, stated an 
Alameda County fire official. Firefighters were dispatched to a structure fire and crews 
had the fire contained early in the morning, fire officials said. About 50 residents in an 
apartment building behind the retail center were allowed to return home following a 
precautionary evacuation, fire officials said. Nine businesses, including a beauty salon, 
a travel agency, and multiple restaurants were damaged in the fire, stated fire officials. 
One firefighter sustained a laceration to the back of his hand while fighting the fire and 
was transported to a local hospital, an Alameda County fire department spokeswoman 
said. 

Source: http://sanfrancisco.cbslocal.com/2012/10/10/firefighter-hurt-battling-union- 
city-4-alarm-strip-mall-fire/ 

57. October 9, Associated Press - (Oklahoma) Man accused of bomb plot. A suspect was 
arrested October 4 after a maintenance worker at a motel in Miami, Oklahoma, spotted 
the makings of Molotov cocktails in a trash bin and alerted police, the Associated Press 
reported October 9. Officers found bomb-making materials in his motel room, along 
with plans to attack nearly 50 churches in Miami, a community of about 13,500, stated 
a police affidavit. An affidavit filed by police said a maintenance worker alerted Miami 
police after noticing a pile of brown bottles with cloth wicks attached by duct tape in a 
trash bin at the Legacy Inn and Suites. A funnel and 5-gallon red gasoline can were also 
dumped in the bin. While background checks were being done on the hotel's 18 guests, 
the maintenance worker accidentally walked into the suspect's room and saw him with 
similar items and a Wal-Mart receipt showing the purchase of other items, the affidavit 
said. Police found pieces of paper in the trash that, when assembled, contained 
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directions for making Molotov cocktails, a list of 48 local churches, a hand-drawn map 
of the churches, and an outline of a plan to plant bombs. 

Source: http://www.columbiatribune.com/news/2012/oct/09/man-accused-of-bomb- 
plot/ 

58. October 9, Napa Valley Register - (California) Bomb technicians detonate chemical 
cache at Calistoga fairgrounds. Bomb technicians from the Napa County Sheriffs 
Office in California blew up an old crate of ether October 9, discovered in a long- 
forgotten disaster cache at the Napa County Fairgrounds. The fairgrounds were closed 
much of the day, but there were only limited, voluntary evacuations of seven nearby 
residences. Officials said there was never any immediate danger to anyone, but that the 
only safe and economical way to dispose of the volatile liquid was to blow it up in a 
controlled way. City workers filled hundreds of sandbags to surround the ether. 

Officers had planned to stage the destruction in several explosions, but eventually 
decided to do it all at once. There were several other crates of material involved as 
well, but officials did not identify what was inside. 

Source: http://napavallevregister.com/calistogan/news/local/bomb-squad-to-blow-up- 
chemicals-at-calistoga-fairgrounds/article 71727656-1231-1 le2-8fda- 
Q01a4bcf887a.html 

59. October 9, Associated Press - (Virginia) Two injured following mall shooting. Police 
searched for a man who fired a gun inside a Henrico County, Virginia mall and sent 
dozens of customers fleeing. Henrico County police told media outlets that two people 
were slightly injured in the October 8 incident. One victim suffered what appeared to 
be a ricochet wound in a leg and another woman fell as she was fleeing and injured an 
ankle. Police said the suspect fired one shot in a hallway outside public restrooms near 
the food court in the Regency Square mall. Investigators also looked for a second man 
who is believed to have argued with the gunman before the shot was fired. 

Source: http://www.whsv.com/news/headlines/Two-Iniured-Following-Mall-Shooting- 
1733 1215 l.html?ref=151 



60. October 9, Associated Press - (Texas) Gunman opens fire in suburban Fort Worth 
Chinese food restaurant; 1 dead, 1 wounded. An unidentified gunman opened fire in 
a north Texas Chinese food restaurant, killing one person and wounding another. The 
incident happened October 9 at the Hunan Wok restaurant in the Fort Worth suburb of 
North Richland Hills. A police investigator said the shooting did not appear to be a 
random act of violence but offered no motive for the deed. He said the wounded man 
was hospitalized in stable condition. About 4 hours later, investigators probed for any 
connection between the shooting and a car found burning near Lake Benbrook, about 
20 miles southwest of the restaurant. Officials said the car was impounded and its 
occupant airlifted to a hospital in undetermined condition. 

Source: http://www.chron.com/news/article/l-dead-l-wounded-in-suburban-restaurant- 
shooting-3934340.php 

For another story, see item 61 
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National Monuments and Icons Sector 



61 . October 9, Denver Post - (Colorado) Rocky Mountain National Park fire among 
several burning in Colorado. High wind and low humidity fed fires in remote areas of 
Colorado the week of October 8, including a blaze of 300 acres in Rocky Mountain 
National Park October 9 about 8 miles west of Estes Park, Colorado. The Larimer 
County Sheriffs Department said the fire was burning less than a half mile from the 
area known locally as "The Pool," about 2 miles west of the Fern Lake Trailhead in 
Moraine Park. Fem Lake Road and Moraine Stables were closed, and homes and 
recreationalists in the area were evacuated as a precaution. The blaze was located about 
2 miles from the nearest road, and air support was requested to join the fight, according 
to the sheriffs department. The Goblin fire in the Animas Canyon north of Durango 
grew to 110 acres, according to fire response managers. The fire was reported October 
6 and was burning on steep, rocky, and inaccessible slopes that lead into the West 
Needles Mountains and the Weminuche Wilderness, about 2 miles south of Needleton. 
Source: http://www.canoncitvdailvrecord.com/news/colorado/ci 21734508/rocky- 
mountain-national-nark-firc-among-scvcral-burning 
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Dams Sector 



Nothing to report 
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